Announcement

Collapse
No announcement yet.

Disabling automatic security updates?

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    #16
    Re: Disabling automatic security updates?

    Originally posted by chconnor
    ...also likewise, yet the security updates happen without asking, for me...

    -c
    So what does your /etc/apt/apt.conf.d/10periodic contain for the entry:

    APT::Periodic::Unattended-Upgrade "0";
    Windows no longer obstructs my view.
    Using Kubuntu Linux since March 23, 2007.
    "It is a capital mistake to theorize before one has data." - Sherlock Holmes

    Comment


      #17
      Re: Disabling automatic security updates?

      Sorry, my post was unclear; Reply #12 -- those four CODE blocks are all from my system. -c

      Comment


        #18
        Re: Disabling automatic security updates?

        Originally posted by Snowhog
        ....
        So what does your /etc/apt/apt.conf.d/10periodic contain for the entry:

        APT::Periodic::Unattended-Upgrade "0";
        Same as yours.
        "A nation that is afraid to let its people judge the truth and falsehood in an open market is a nation that is afraid of its people.”
        – John F. Kennedy, February 26, 1962.

        Comment


          #19
          Re: Disabling automatic security updates?

          My files look the same as chconnor in Reply #12.
          And the results are the same. Unattended updates continue despite my desire to not allow them.

          Comment


            #20
            Re: Disabling automatic security updates?

            unattended-upgrades & PackageKit

            By my knowledge the Packagekit is not using the unattended-upgrades (edit - maybe ??). The PackageKit is using own code to install/upgrade/remove.

            - The KPackageKit is a graphical frontend to the Packagekit.
            - The Packagekit is a multidistribution software manager.
            - The Packagekit is using backends to do the actual work - with the Ubuntu the backend is packagekit-backend-apt.

            kpackagekit -> packagekit -> packagekit-backend-apt

            The unattended-upgrades was there before the Packagekit and maybe will be there after the Packagekit .

            ...PackageKit is not meant to replace advanced tools like Synaptic...
            Before you edit, BACKUP !

            Why there are dead links ?
            1. Thread: Please explain how to access old kubuntu forum posts
            2. Thread: Lost Information

            Comment


              #21
              Re: Disabling automatic security updates?

              Seems to me that this is true; I see no evidence that unattended-upgrades is actually running for these updates. /var/log/unattended-upgrades/ is empty for me. (I ran it once, manually, and a log was generated.) So I suppose something else is doing this updating.

              /etc/cron.daily/apt doesn't seem to do any "security" updating besides its call to unattended upgrades (which isn't happening, per the configs that we all seem to have set correctly).

              I don't see anything else in /etc/cron.daily/ that would seem to cause kpackagekit or anything related to run in a relevant fashion. There must be some other infrastructure for the background-running of these updates? Is there some higher-level KDE process, perhaps?

              Maybe next time a security update happens, review a process list and see if you can find a script or process clue?

              -c

              Comment


                #22
                Re: Disabling automatic security updates?

                Correction (?)

                That "By my knowledge the Packagekit is not using the unattended-upgrades" is /was based that the kpackagekit/packagekit/packagekit-backend-apt don't have direct dependency for the unattended-upgrades.

                Looking more closely:

                Code:
                apt-cache rdepends unattended-upgrades
                unattended-upgrades
                Reverse Depends:
                python-software-properties
                and
                Code:
                apt-cache rdepends python-software-properties
                python-software-properties
                Reverse Depends:
                cloud-init
                software-properties-kde
                software-properties-gtk
                packagekit-backend-apt
                cloud-init
                The "software-properties-kde" is editing the "10periodic".
                Before you edit, BACKUP !

                Why there are dead links ?
                1. Thread: Please explain how to access old kubuntu forum posts
                2. Thread: Lost Information

                Comment


                  #23
                  Re: Disabling automatic security updates?


                  Here is what my "software-properties-kde" looks like:

                  Code:
                  #!/usr/bin/python
                  # software-properties - graphical abstraction of the sources.list
                  # 
                  # Copyright (c) 2007 Canonical Ltd.
                  #
                  # Author: Jonathan Riddell <jriddell@ubuntu.com>
                  # 
                  # This program is free software; you can redistribute it and/or 
                  # modify it under the terms of the GNU General Public License as 
                  # published by the Free Software Foundation; either version 2 of the
                  # License, or (at your option) any later version.
                  # 
                  # This program is distributed in the hope that it will be useful,
                  # but WITHOUT ANY WARRANTY; without even the implied warranty of
                  # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
                  # GNU General Public License for more details.
                  # 
                  # You should have received a copy of the GNU General Public License
                  # along with this program; if not, write to the Free Software
                  # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
                  # USA
                  
                  import gettext
                  import os
                  import sys
                  
                  from optparse import OptionParser
                  
                  import aptsources
                  from aptsources.sourceslist import SourcesList
                  
                  #sys.path.append("@prefix@/share/update-manager/python")
                  
                  from softwareproperties.kde.SoftwarePropertiesKDE import SoftwarePropertiesKDE
                  
                  from PyKDE4.kdecore import ki18n, KAboutData, KCmdLineArgs , KCmdLineOptions
                  from PyKDE4.kdeui import KApplication, KMessageBox
                  
                  class OptionParsed:
                   debug = False
                   massive_debug = False
                   no_update = False
                   enable_component = ""
                  
                  #--------------- main ------------------
                  if __name__ == '__main__':
                   _ = gettext.gettext
                  
                   appName   = "softwarepropertieskde"
                   catalog   = "software-properties"
                   programName = ki18n ("Software Sources")
                   version   = "0.74"
                   description = ki18n ("Software Sources List editor")
                   license   = KAboutData.License_GPL
                   copyright  = ki18n ("(c) 2007 Canonical Ltd.")
                   text    = ki18n ("none")
                   homePage  = "[url]https://launchpad.net/software-properties"[/url]
                   bugEmail  = ""
                  
                   aboutData  = KAboutData (appName, catalog, programName, version, description,
                                  license, copyright, text, homePage, bugEmail)
                  
                   KCmdLineArgs.init (sys.argv, aboutData)
                  
                   opts = KCmdLineOptions()
                  
                   opts.add ("debug", ki18n("Print some debug information to the command line"))
                   opts.add ("massive-debug", ki18n("Print a lot of debug information to the command line"))
                   opts.add ("dont-update", ki18n("No update on repository change (useful if called from an external program)"))
                   opts.add ("enable-component <name>", ki18n("Enable the specified component of the distro's repositories"), "component_arg")
                   opts.add ("enable-ppa <name>", ki18n("Enable PPA with the given name"), "ppa_arg")
                   opts.add ("attach <WinID>", ki18n("Win ID to act as a dialogue for"), "attach_arg")
                   
                   KCmdLineArgs.addCmdLineOptions(opts)
                   
                   #print "no update" + str(options.no_update)
                   # Check for root permissions
                   if os.geteuid() != 0:
                    kapp = KApplication()
                    text = "Please run this software with administrative rights. To do so, run this program with kdesudo."
                    title = "Need administrative powers"
                    msgbox = KMessageBox.sorry(None, text, title, KMessageBox.Notify)
                    sys.exit(1)
                  
                   localesApp="software-properties"
                   localesDir="/usr/share/locale"
                   gettext.bindtextdomain(localesApp, localesDir)
                   gettext.textdomain(localesApp)
                  
                   data_dir="/usr/share/software-properties/"
                   args = KCmdLineArgs.parsedArgs()
                   afile = ""
                   options = OptionParsed #FIXME set debug, massive_debug
                   if args.count() >= 1:
                    afile = args.arg(0)
                    afile = unicode(afile, 'utf-8')
                  
                   attachWinID = None
                   if args.isSet("debug") == True:
                    options.debug = True
                   if args.isSet("massive-debug") == True:
                    options.massive_debug = True
                   if args.isSet("dont-update") == True:
                    options.no_update = True
                   if args.isSet("attach") == True:
                    attachWinID = args.getOption("attach")
                  
                   if args.isSet("enable-ppa"):
                    app = SoftwarePropertiesKDE(datadir=data_dir, options=options, file=file)
                    options.enable_ppa = str(args.getOption("enable-ppa"))
                    app.add_source_from_line("ppa:%s" % options.enable_ppa)
                    app.sourceslist.save()
                   elif args.isSet("enable-component") == True:
                    sourceslist = SourcesList()
                    options.enable_component = str(args.getOption("enable-component"))
                    distro = aptsources.distro.get_distro()
                    distro.get_sources(sourceslist)
                    distro.enable_component(options.enable_component)
                    sourceslist.save()
                    print "Enabled the %s component" % options.enable_component
                   else:
                    app = SoftwarePropertiesKDE(datadir=data_dir, options=options, file=file, attachWinID=attachWinID)
                    app.run()
                    sys.exit(app.modified_sourceslist)

                  Comment


                    #24
                    Re: Disabling automatic security updates?

                    Yes, the "software-properties-kde" is a python script and it is called from the KPackageKit when you want to edit the software sources.

                    [img width=400 height=292]http://img197.imageshack.us/img197/4748/softwaresources.png[/img]


                    An example - removing the KPackageKit and et.al. > Topic: Changing defaults: Removing KPackageKit
                    Before you edit, BACKUP !

                    Why there are dead links ?
                    1. Thread: Please explain how to access old kubuntu forum posts
                    2. Thread: Lost Information

                    Comment


                      #25
                      Re: Disabling automatic security updates?

                      So:
                      Code:
                      kdesudo software-properties-kde
                      brings up the good ol' software sources dialog, and according to Rog131 that is altering the 10periodic file.

                      However my /etc/apt/apt.conf.d/10periodic file looks good (APT::Periodic::Unattended-Upgrade "0" so this sounds like apt is ignoring that setting. /etc/cron.daily/apt does not appear to be running the command "unattended-upgrade" on my system; i've tested the apt script in a few ways, and i'm pretty sure of that...

                      Code:
                      $ apt-config shell UnattendedUpgradeInterval APT::Periodic::Unattended-Upgrade
                      UnattendedUpgradeInterval='0'
                      buntu-user, do you have anything in /var/log/unattended-upgrades/ ?

                      I've added the line
                      Code:
                      APT::Periodic::Verbose "10";
                      ...to /etc/apt/apt.conf.d/10periodic, and i'll report back on whatever that yields, but i have a feeling that the security updates are coming either through a bug in that cron.daily apt script (e.g. when doing non-unattended-upgrades) or some other route entirely, of which i'm ignorant... (e.g. kpackagekit scripts or something, none of which i can find in the cron stuff) Any opinions?

                      [edit: when i get a security update, it's popping up notifications and dialogs and everything in KDE costume; doesn't this imply that a KDE/Kubuntu-level script, i.e. not an apt script, is instigating things? Is there any other cron-like framework that Kubuntu uses?]

                      -c

                      Comment


                        #26
                        Re: Disabling automatic security updates?


                        chconnor, there is nothing in /var/log/unattended-upgrades/
                        It appears to be an empty folder.

                        Comment


                          #27
                          Re: Disabling automatic security updates?

                          For me this seems to have fixed itself in kde4.4.4.
                          Anyone else confirm its a fixed by last update issue?
                          Possibly kubuntu-desktop (1.174) to 1.174.1
                          or python-notify (0.1.1-2build3)

                          Comment


                            #28
                            Re: Disabling automatic security updates?


                            Interesting.
                            Just did an apt-get update/upgrade to make sure. No upgrades available.

                            Currently I have kde-window-manager 4:4.4.2-0ubuntu14 installed.
                            Currently I still have kubuntu-desktop 1.174 installed.

                            python-notify 0.1.1-2build3 IS available but not installed.

                            Comment


                              #29
                              Re: Disabling automatic security updates?

                              Sorry I think python-notify 0.1.1-2build3 was part of the blueman install.


                              Comment


                                #30
                                Re: Disabling automatic security updates?

                                Originally posted by buntu-user
                                Currently I have kde-window-manager 4:4.4.2-0ubuntu14 installed.
                                same here.

                                Currently I still have kubuntu-desktop 1.174 installed.
                                Same here. 1.174 to 1.174.1 didn't seem to touch much that seems relevant.
                                http://launchpadlibrarian.net/496120....174.1.diff.gz
                                ...but i'm no expert, for sure.

                                python-notify 0.1.1-2build3 IS available but not installed.
                                I have 0.1.1-2build3 installed. launchpad says it is the current Lucid version:
                                https://launchpad.net/ubuntu/+source/notify-python

                                Maybe something else in 4.4.4 fixes it, but apparently that's not been pushed to the repositories?

                                -c

                                Comment

                                Working...
                                X